Red Hat Security Advisory

RHSA-2021:2179

RHV Manager security update (ovirt-engine) [ovirt-4.4.6]

Released 2021-06-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 ovirt-engine-ui-extensions-1.2.6-1.el8ev, ovirt-web-ui-1.6.9-1.el8ev

TI-2021-06035 CVE-2021-23337 · GHSA-35jh-r3h4-6jhm

MEDIUM 59

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.21333 Published 2021-02-15 Partial fix · 4.17.21 CWE-94

TI-2020-17303 CVE-2020-28500 · GHSA-29mw-wpgm-hmr9

MEDIUM 40

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.07336 Published 2021-02-15 Partial fix · 4.17.21 CWE-1333